TGViewer
Channel Public Channel
APT

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat
Open in Telegram
Subscribers
16.9K
Photos
565
Videos
28
Links
909

Showing posts older than #328 · Back to latest

Older Posts 20 shown
Post #325 235
NimHollow

Nim implementation of Process Hollowing using encrypted shellcodes and direct syscalls (NimlineWhispers by @ajpc500 is rocking 🔥). Some slides for better understanding of the technique are inside!

https://github.com/snovvcrash/NimHollow

#nim #edr #bypass #syscall
Post #323 235
🔥OWASP Top 10 2021 DRAFT is out 🔥

Now available for peer review, comment, translation, and suggestions for improvements:

owasp.org/Top10/

#OWASPTop10
Post #319 206
Backstab — Kill EDR Protected Processes

Tool capable of killing antimalware protected processes by leveraging sysinternals’ Process Explorer (ProcExp) driver, which is signed by Microsoft.

https://github.com/Yaxser/Backstab

#edr #bypass #kill #process #unload
GitHub GitHub - Yaxser/Backstab: A tool to kill antimalware protected processes A tool to kill antimalware protected processes. Contribute to Yaxser/Backstab development by creating an account on GitHub.
Post #318 280
Kiterunner — Contextual Content Discovery Tool

Kiterunner is a tool that is capable of not only performing traditional content discovery at lightning fast speeds, but also bruteforcing routes/endpoints in modern applications.
Modern application frameworks such as Flask, Rails, Express, Django and others follow the paradigm of explicitly defining routes which expect certain HTTP methods, headers, parameters and values.
When using traditional content discovery tooling, such routes are often missed and cannot easily be discovered.
By collating a dataset of Swagger specifications and condensing it into our own schema, Kiterunner can use this dataset to bruteforce API endpoints by sending the correct HTTP method, headers, path, parameters and values for each request it sends.

https://github.com/assetnote/kiterunner

#kiterunner #discovery #tools
GitHub GitHub - assetnote/kiterunner: Contextual Content Discovery Tool Contextual Content Discovery Tool. Contribute to assetnote/kiterunner development by creating an account on GitHub.
Post #311 270
Dumping Plaintext RDP credentials from svchost.exe.

https://www.n00py.io/2021/05/dumping-plaintext-rdp-credentials-from-svchost-exe/

#dumpcreds #RDP #svchost
www.n00py.io Dumping Plaintext RDP credentials from svchost.exe Recently I was browsing Twitter and came across a very interesting tweet: A simple string search within the process memory for svchost.exe revealed the plaintext password that was used to connect to the system via RDP. After some testing, I was also able…
Post #306 223
Ever wondered what happens when you type in a URL in an address bar in a browser? Here is a brief overview...

#programming #web #sketchnotes
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →